easyMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show ipv6 access-list FILTER-IPv6
IPv6 access list FILTER-IPv6
permit ipv6 2001:DB8:1::/48 any sequence 10
deny ipv6 any any sequence 20Based on this output, what is the effect of this access list when applied to an interface?
⚠ Common exam trap
Cisco often tests the implicit deny all at the end of an access list, and the trap here is that candidates may overlook the deny ipv6 any any entry (sequence 20) or assume it is not present, leading them to incorrectly think the ACL permits all traffic (Option A) or permits all except the specified prefix (Option D).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It permits only IPv6 traffic from 2001:DB8:1::/48 and denies everything else
The access list FILTER-IPv6 has two entries: a permit statement for source 2001:DB8:1::/48 to any destination (sequence 10), followed by an implicit deny all (sequence 20). When applied to an interface, only traffic matching the permit entry is allowed; all other IPv6 traffic is denied by the implicit deny rule at the end of the list. This results in permitting only traffic from the specified prefix and denying everything else.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It permits all IPv6 traffic
Why it's wrong here
Only traffic from the specified prefix is permitted; other traffic is denied.
- ✗
It denies all IPv6 traffic from 2001:DB8:1::/48
Why it's wrong here
The first line permits that prefix.
- ✓
It permits only IPv6 traffic from 2001:DB8:1::/48 and denies everything else
Why this is correct
Sequence 10 permits the prefix, sequence 20 denies all other traffic.
- ✗
It permits all IPv6 traffic except from 2001:DB8:1::/48
Why it's wrong here
The ACL does the opposite – it permits that prefix and denies all else.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.